266411 matches found
CVE-2026-66916
Password-Protected Category Bypass via JSON Format in JoomGallery JoomGallery ≤ 4.3.0-stable — Unauthenticated Attacker Bypasses Password Gate to Download Protected Images SUMMARY An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is...
CVE-2023-32407-a-macOS-TCC-bypass-in-Metal
CVE-2023-32407-a-macOS-TCC-bypass-in-Metal...
CVE-2025-48466
CVE-2025-48466 Modbus Packet Injection on Advantech WISE 4060LAN / IoT Gateway for door control. see script: main.py Summary I was able to figure out that it is just very easy to somehow manipulate the Modbus server running on an IoT Gateway for door control on a network. Any remote attacker...
Reverse_DNS_Shell
DNShell v1.7 Description: A Python Reverse Shell that uses DNS as the C2 channel. Requires: dnslib dnspython pycrypto Gotchyas: don't forget to change your HOST don't forget to change your SECRET key run server first Moar Info: http://lockboxx.blogspot.com/2015/01/python-reverse-dns-shell.html...
TestRail-files.md5-IAC-scanner
TestRail-files.md5-IAC-scanner Improper Access Control in Gurock TestRail versions Input server in http:\ or https:\ format The script will print out the server/file location, status code if not 500, and any interesting keywords found...
cve-2025-57819-freepbx-range
CVE-2025-57819 FreePBX Cyber Range Isolated educational cyber-range for CVE-2025-57819 CWE-89, CWE-288. Original FreePBX-compatible training application — not official Sangoma FreePBX. Quick start git clone https://github.com/shivammittal2403/cve-2025-57819-freepbx-range cd...
CVE-2020-5902
CVE-2020-5902 F5 BIG-IP Traffic Management User Interface TMUI Remote Code Execution In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote...
CVE-2026-104350
Adobe Campaign Classic ACC is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue...
CVE-2026-11991-Exploit
CVE-2026-11991 — FlowForms Unauthorized Form Publication Authenticated Contributor+ Authorization Bypass to Publish Any Draft Form in FlowForms ≤ 1.1.1 Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2026-11991 CVSS Score| 6.2 — Medium CVSS Vector|...
SOC235---Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515
EVENTID-197 field| Value ---|--- EventID| 197 Event Time| Nov, 09, 2023, 09:47 AM Rule| SOC235 - Atlassian Confluence Broken Access Control 0-Day CVE-2023-22515 Level| Security Analyst Hostname| Confluence Data Center Destination IP Address| 172.16.17.234 Source IP Address| 43.130.1.222 HTTP...
DeimosC2
DeimosC2 Deimos is in: DEPRECATED DeimosC2 is no longer maintained and has a known XSS vulnerability CVE-2025-26244. Thanks to JaRm222 for identifying the vuln and notifying us. His writeup of the vuln can be foundhere. DeimosC2 is a post-exploitation Command & Control C2 tool that leverages...
EUVD-2026-111226
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...
CVE-2026-104350
The software Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by inducing a victim to visit a maliciously crafted URL or interact with a compromised web page to inject scripts. Successful exploitation could res...
EUVD-2026-111227
Adobe Campaign Classic ACC is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue...
CVE-2026-104350 Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe Campaign Classic ACC is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue...
CVE-2026-31857
CVE-2026-31857: Craft CMS control panel RCE CVE-2026-31857 is a remote code execution issue in Craft CMS relational condition rules. BaseElementSelectConditionRule::getElementIds renders user-controlled input as an unsandboxed Twig template. An authenticated Control Panel user can submit a crafte...
DataInject-BOF
Data Inject BOF A beacon object file implementation of the process injection proof-of-concept from my blog post Control Flow Hijacking via Data Pointers. Hijacks control flow via overwriting combase.dll's Control Flow Guard function pointers called by COM proxying functions. Important Notes From ...
jackhammer
Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...
Instatic-Stored-XSS-CVE-2026-103931
URL scheme filter bypass in isSafeUrl via leading C0 control characters Affected: Instatic v0.0.13 / commit 63ad5d6 and all earlier revisions containing src/core/html-sanitize/index.ts Component: src/core/html-sanitize/index.ts → isSafeUrl / safeUrl Class: CWE-79 Stored XSS via CWE-184 Incomplete...
CVE-2022-1329
WP Elementor 3.6.0/1/2 Remote Code Execution Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version Version: 3.6.0,...